A BISO is the single point of contact between business teams and security, legal, and operations. They don't do the technical work themselves, but coordinate it, ensure processes are in place, and solve problems. Once teams understand the model, it becomes an effective catalyst for addressing security and compliance needs.
And I think once the team started really truly understanding and grasping that, I can talk till I'm blue in the face, but if they're not operating at that level, that was the challenge. And then they started operating at that level and have been, and now it's starting to finally shift and people are starting to understand how to use BISOs. And essentially they're a single point of contact. That's what I explain. They're a single point of contact for you all if you're at the business level to go to a BISO if you have any challenges. With say compliance or a new regulation coming out, you essentially can come to the BISO and say, hey, I've got this, what do I do? Help me. They, and they're the glue. They don't do the work, but they connect you with the people, they get things going, they get the ball going, and they make sure things get implemented on time, processes are in place, and they problem solve for you essentially.
